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FIG. 4 

RECEIVE INPUT SCRAMBLED 
DATA STREAM 
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FOR GENERATING THE SAME CW 
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FIELD OF THE INVENTION 

The present invention relates to the production and recording of digital 
data streams, particulariy scrambled digital data streams such as scrambled digital 
television data streams. 

BACKGROUND OF THE INVENTION 

Systrans for scranabling a television data stream are weH-known in the 
art One sudi system is described in the foUowing US Patents: 5;282,249 to C3ohen et 
aL; 5,481,609 to Cohen et aL Soambied television data streams described in the 
Cohen et al. patents conqirise both scrambled data rqires^iting televisicm signals and 
coded control messages, also known as ECMs. The ECMs of Cohcai ^ aL comprise, in 
a coded form, data necessary for generating a control word (CW) which may be used to 
desoaroble the scrambled data iqnesentmg television signals. 

While the two patents to Cohen et aL describe an analog system, that is, 
a system in which analog televiaon data streams are broadcast to television sets, it is 
appreciated Umt »milar ECM mettiods m^ also be used for digital television data 
streams. Generally, the scrambliiig tedmiques used for scrambling analog television 
signals such as, for example, the well-known "cut-and-iotate" technique, are chosen 
for their ^ticahiUty to analog signals, lii scramblmg of digital television signals 
ofbst scramblmg techniques, wefl-known m the art, are used, the techniques being 
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more appropriate to digital signals sudi as, for example, applying the weU-known DES 
algoritfam to the digital television signals. 

Mefliods of transmitting a scrambled digital signal, including ECMs, are 
described in the MPEG-2 standard, ISO/IEC 13818-6. 12 July 1996 and subsequent 
editions. 

Recording of analog television si^rals sudi as, for example, reconfing 
using a VCR, is weU-known in the art and VCR equipment is widely commercially 
available ftom a variety of manufecdiiers. Rccoidmg of digital television signals is 
also known. A consnni» digital VOl is described, for exanqde, in the article "A 
Consumer Digital VCR for Wgilal Broadcasting" by Okamoto et al.. published in 
IEEE Transactkms cm Caasamer Eleetionics. Vol. 41, No. 3, August 1995, pp. 643 - 

649. 

US Patent 5,574,787 to Ryan describes an q>paratus and method for 
copy protection fiir video platfomis in which a speciaUy adapted video recorder, 
playback device, or set top decoder is used to protect copyright material. 

European patrat i^licalion BP 0 714 204 A2, assigned to LG 
Electroucs, Inc., describes a method for copy protection in digital video systems. 

The disclosures of all references mentioned above and throughout the 
pKScat specification are hereby uicorporated herdn by reference. 
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SUMMARY OF TOE INVENTION 

Tlie preasDt invention seeks to provide an inqnoved system Uxc 
producing and lecoiding digital data streams, and paiticulariy fix protecting leccmied 
digital data streams including digital television data. 

The prior art digital recording systems lefiured to above do not folly 
address the problem of recording a scrambled digital data stream. The teim *'digital 
data stream", as used tfarougbout the present specification and claims, refers in a broad 
soise to any stream of digital data transnutted continuoiisl^ at least during a particular 
period of time, and particulady inchides broadcast digital data such as htoadcast digital 
tdevisioQ signals. The tcsmi **saamhling*' in all of its foims, as used thioughout the 
fnesent spedfication and claims, refers to any metibod of scrandiling, encoding, or 
encrypting data, many such methods bdng well-faiown in the art 

A digital VCR sudi as diat described by CMcamoto et aL records and 
reproduces a digital bit stream; that is, the digital VCR of (Kamoto et aL records and 
produces whatever bits are presented thereto. Hius, the digital VCR of Okamoto et aL 
could reconl and reproduce a scrambled digital data stream. la the Systran of Okamoto 
et aL, however, jnoblems could arise in desaand>ling the recorded data stream sudi as, 
for e)caiiq}le, for playing on a television. 

As is wdl known m die art, stourity fimcti(»is in scrambled televisi(m 
systems are typically controlled by a rranovable security elment sudi as a removable 
smart card. Furdietmore, it is well known in the art that, in actual practice, operators 
of scrambled television systrans periodically r^ace the removable security elements 



found in consumer home systems in order to change the security and scrambling 
behavior of the system. 

After replacement of the rranovable security elemmt or, typically, after a 
limited transition period foUowing r^lacement of tfie removable security element, 
broadcasts scrambled with methods applicable to the previous removable security 
element can not be descrambled using the present tranovable security elem^t. 
Typically, therefore, if a recording were made on a system such as fliat described by 
Okamoto et aL of a broadcast from a digital Systran using techniques similar to those 
described by Cohen et aL and m the MPEG-2 standard, both referred to above, the 
recording would become unusable as soon as a diange of removable security elements 
was carried out by the scrandded tdeviskm system operator. The present mvention 
seeks to provide apparatus and meOiods for recorduiig digital data streams whidi, in 
addition to having other features, overcome the problem of unusability of recordings 
after a dban^ of removable security demraits. 

There is thus provided in accordance with a preferred embodimOTt of the 
present invention a method for produdng an ouq>ut scrambled digital data stream from 
an input scrambled digital data stream, the input scrambled digital data stream 
induding a plurality of control messages (ECMs), each ECM mcluding coded 
information for generating a control word (CW) assodated widi the ECM and hemg 
sACoded uang an ECNf k!^. the input scranibled digital data stream also including a 
plurality of segmaits of scrambled digital data, each segment of scrambled digital data 
bdng associated with one of the ptoralily of ECMs and bdng scraihbled usmg the CW 
associated wiA the ECM. the method mcluding replacing eadi of the plurality of 
ECMs with a corresponthng transformed ECM (TECM), each corrcspondmg TECM 



including coded infonnadon for gen^ting tiie CW assodaled with the corresponding 
ECM and being encoded using a TECM key, thus producing the output sctambied 
digital data stream, wh^in flie ECM key is r^Iaced with a new ECM key at an ECM 
key change time, and the TECM key is not retraced at the ECM key diange time. 

Furtbor in accordance with a pxiaaed embodimrat of the preset 
invention the step of rqplacing includes pecfonning flie following steps iterativeiy for 
each one of the plurality of ECMs: cecdving the one ECM and the segment of 
scrand>lfid digital data assodated theiewitfa, gcaiaating the associated CW from the one 
ECM using the ECM key, gcmeratuig a transfonned ECM (TBCM) induding coded 
infoimatitm for generating the associated CW and being encoded using a TECM key, 
ou^pittting the TSCSA^ and onfputting the segment of scrambled digital data associated 
with the ECM. 

Thare is also provided in accordance witib another preferred embodiment 
of the presoit invratioa a m^od fcx recording, on a recording medium, a Inoadcast 
scrambled digital data stream to produce a soambled digital lecozding, the broadcast 
saanfl>led digital data stream induding a plurality of control messages (EGMs), eadi 
ECMiiududmg coded inf<»in^Qn for gniecafing a control word (CW) assodated with 
the ECM and being encoded using an ECM key, the broadcast scrambled digital data 
stream also indudii^ a plurality of segmraits of scrambled digital data, each segment 
of soiambled digital data bdng assodated with one of tfie plurality of ECMs and bdng 
soambled nsmg the CW assodated with die ECM, (b& method including receiving the 
broadca^ »:ranibled digital data stream, and reocnding <»i the xeccmdlng medium a 
scrambled digital data stream including a plurality of transfonned ECMs (TECMs) and 
flie plurality of segm^ts of digital data, wheam each of the plurality of ECMs is 



iq^Iaced with a corresponding TECb/L each corresponding TECM including coded 
information for generating the CW assodated with the corresponding ECM and being 
CTCoded usmg aTECM key. 

Further in accordance witii a preferred anbodiment of the present 
invention the recordmg st^ inchides peifonmng die foUowing steps iterativdy for 
each one of the plurality of ECMs in the broadcast scrambled digital data stream: 
generating die associated CW from the one ECM using the ECM key, generatmg a 
TECM mcluding coded information for generating the assodaied CW and bang 
encoded uang a TECM key, reoradmg the TECM on the recording medium, and 
lecoiding the segment of scramWed digital data associated with die cme ECM on the 

recording mediunL 

Still fordier m accordance wifli a preferred embodiment of die present 

invention die recording medhim mcludes a digital t^. 

F^irdier in accordance widi a preferred embodunent of die preset 
invration the recording medium mchides a conq)Uter-accessible storage medium 

associated with a computer. 

Additionally in accordance widi a preferred enibodimeiit of die present 
inventi(m die broadcast scramWed digital data stream includes a television scrambled 

digital data stream. 

Moreover in accordance widi a preferred enabodimcait of die present 
mvention each of die phuality of ECMs is encoded using a hashing mediod. 

There is also provided in accordance wifli anodier preferred anbodmaent 
of die present inventi<m jqiparatos for recording, on a recording medium, a broadcast 
SCTambled digital data stream to produce a recorded scrambled digital data stream, die 



broadcast scrambled digital data stream including a plurality of scranAtling cmitrol 
messages (ECMs), each ECM including coded infonnation for generating a control 
word (CW) associated with the ECM and bong encoded using an ECM key, and a 
plurality of segments of scrambled distal data, eadh s^m^t of soambled digital data 
bdng associated wi& one of the plurality of ECMs and bdng scrambled using the C W 
associated with the ECM, (he zipparaas induing lecdving appaastm fox receiving the 
broadcast soiambled digital data stream, and recording i^)paratus for tecaa^ng <m the 
reooiding medium a scrambled digital data stream mduding a plurality of transformed 
ECMs (lECMs) and the phuaUty of s^ments of digital data, wheiem eadi of the 
plurality of ECMs is replaced with a corresponding TECM, eadi corresponding IBCM 
including coded infoimation for gsxnexaSaag tibe CW associated with the ccxre^nding 
ECM and bdng encoded u^ a TECM key. 

Thsi^ is also provided in accordance with another preferred embodiment 
of tb» presmt inv^cm ap^asim for prodndbag an output soambled digital data 
stream from an xqmt soambled digital data stream, the input scrambled digital data 
stream including a plurality of scianibling control messages O^CMs), each ECM 
indttding coded information for ^laatmg a omtrol word (CW) assodated widi the 
ECM and being oicoded using an ECM key, and a plurality of segments of soambled 
digital data, eadi segment of scrambled digital data bdng associated with one of the 
phnality of ECMs and being scrambled using the CW associated with the ECM, the 
s^paxatus including BCM iq>lacement zpp^xatJas for replacing eadi of the plurality of 
ECMs with a conesponding transfotmed ECM (TECM), each cotresponding TECM 
indudmg coded iofonnation for floating the CW assocutted with the conespcmding 
ECM and bemg oicoded using a TECM key, wherem the ECM key is replaced with a 



new ECM key at an ECM key change time, and the TECM key is not replaced at flie 
ECM k<^ change time. 

Further in accordance mih a preferred embodiment of tihe (nesrat 
invention the recoiding ai>paratns indudes a CW extractw: for generating the 
associated CW ftom each of the plurality of ECMs using the ECM key, a TECM 
generator for receiving die associated CW ftom the CW extractor and foe generating a 
TECM including coded mformation for gwierating the associated CW and bdng 
encoded using a TECM key. and medium recordmg apparatus for recdvmg the TECM 
ftom the TECM generator and the segmrait of scrambled digital data ftom the receiving 
appsaam and for lecordmg the TECM and the segment of scrambled digital data 
associated widi the one of &e phiralily of ECMs on the recording medium. 

Still fiiitiier in acccndance with a preferred onbodiment of flie present 
invention tiie ECM replacement apparatus inchides a CW extractor for generating the 
associated CW from each of die phiraUty of ECMs using the ECM key, and a TECM 
generator for receiving die associated CW ftom die CW extractor and for gwietating a 
TECM including coded information for graietating die associated CW and encoded 
using a TECM key. 

Additionally in accordance with a ptefeired embodunent of die present 
mvoition die apparatus indudes a removable securily device, wherein die removable 
security device includes the CW extcacUir. 

Moreover m accoxdance widi a prefiaxed embodimoit of die present 
invention die removable securily device also Inchides die TECM generator. 

Further in accordance widi a piefened «nbodinMait of die present 
invoation the r^ovable seouity device indudes a smart card. 
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Thrae is also provided in accoidaace widi anoUier preferred embodiment 
of the present invention appaiams for tnmsfonning a scrambling control message 
(ECM) including coded information for generating a control word (CW) associated 
with Ihe ECM and bdng encoded using an ECM key into a tiansfonned sccambling 
control message (TECM). the apparatus including ECM input apparatus for receiving 
die ECM, a CW extractor for generating the assooated CW feran the ECM using the 
ECM key, a TECM generator for genoating a transformed ECM (TECM) including 
coded information for generating the assodaied CW and being encoded using a TECM 
k^, and ECM output apparatus for ou^tting die TECM, wherein the ECM key is 

replaced with a new ECM key at an EOl key change time, and the TECM key is not 
replaced at the ECM change time. 

There is also provided in accordance with another pre£»i6d embodiment 
of the present invoition ^aratus for produdng an ou^Rit scrainbled digital data 
stream fincnn an input scrambled digital data stream, the inpit shambled digital data 
stream including a phiratity of control messages (ECMsX each ECM mchiding coded 
information for generating a control word (CW) associated with the ECM and being 
oiooded usmg an ECM key, the iiqmt scrambled digital data stream also induding a 
plurality of s^ments of scrambled digital data, eadi s^iment of scrambled digital data 
being assodated with one of the plurality of ECMs and being scrambled using the CW 
associated witihi the ECM, the qiparatus indndu^ soandded digital data stream input 
apparatus for receiving an ECM and a segment of scrambled digital data associated 
ihoewith, ECM replaconent apparams for replacing the ECM with a transformed 
ECM (TECM), and soambled digital data stream outfrnt sqjparatus for outputdng the 
output scrambled digital data stream mdudmg the TECM and die segment of 



saamblcd distal data, wherein the WM key is r^laced with a new ECM key at an 
ECM key change time, and the TECM key is not replaced at the ECM key change 
time. 

Fudfa^ in accoidance with a jHsfmed tanbodtment of the {N^esent 
invention the apparatus includes ECM interface ^paratos for outputting the ECM and 

receiving the TBCM, 

Still further in accotdance with a preferred embodiment of the present 
invraition the ECM intof ace is ad^ted to receive a removable security elemenL 

Additionally m accoidance with a prefened ^nbodunoit of the present 

invention flie lemovable security dement indndes a smart card. 

Th«e is also provided in accordance wifli anolhCT prejEenKd eirfK)dimrait 

of die presrat invention a meliiod for transforming a scrand>]ing control message 
(ECM) induding coded information for gen«atii^ a control word (CW) associated 
with the ECM and being encoded using an E04 key mto a transformed scrambling 
control message CTECM), die method induding recdving the ECM. generating the 
assodated CW ftom the ECM using the ECM key, generating a transformed ECM 
(TECM) including coded infoimation fwr generating the assodated CW and being 
encoded using a TECM key. and outputting the TECM. wherein the ECM key is 
replaced with a new ECM key at an ECM dumge time, and the TECM toy is not 
i^laced at the ECM diange time. 

There is also piovided in accoidance with anoth^ preferred embodiment 
of the present invention a method for piodudng an output scianibled digital data 
stream faim an input scrambled digitd data stnsam. die input scrambled digital data 
stream induding a plurality of contrd messages (ECMs), each ECM including coded 



inf onnation for genc^atmg a control word (CW) assodated wMi tb& ECM and being 
racoded using an ECM key, the input soambled digital data stream also including a 
pluraliQr of segments of soambled digital data, each segment of scrambled digital data 
being associated wi& one of the phiraliQr of BCMs and being scraoibled using the CW 
associated with the ECM, the method mcludmg receiving an ECM and a segment of 
saambled digital data associated Uioewilh, iq>ladng die ECM with a transfonned 
ECM (TECM), and ou^tdng the ou^ut sa:ambled digital data stieam including the 
lECM and the segment of scrambled digital data, wherdn the ECM key is replaced 
with a new ECM key at an ECM k^ diange tune, and the TECM key is not replaced 
at ti^KM key change tune. 

Rirdiffl: in acccndance with a inefetxed onbodiment of the preset 
invention tiic method also includes ou^[mtting the ECM and receiving die TECM. 

Still furth^ in accordance wilh a prdfened embodiment of the present 
invention the step of outputdng tbs^BQM and ceceivhig the TECM mdudes outputting 
iheEOM to a removable security elooaait and receiving ^ TECM frcnntiie r«Diovabte 
security element 

Additionally in accordance widi a pr^iared embodiment of the piesmt 
invmtion removable security ekemsM indudes a snaart card. 



BRIEF DESOUPTION OF THE DRAWINGS 



The piesent invraitioii will be understood and iq)preciated more folly 
ftom the following detailed desciipti<m, taken in conjunction with the drawings in 
vdbich: 

Fig. 1 is a siiiq>Med partly pictorial, partly block-diagram illustration of 
a scrambled distal data stream recording and playbadc systian, constructed and 
op^ve in accordance wifli a prdtened embodiment of the piesent invention; 

Fig. 2 is a sim^ified bUx^ diagram illustrating the production of a 
recording scrambled digital data stream ftom a broadcast scrambled digital data stream 
byaportionoflhesqyparatusofRg. 1; 

Hg. 3 is a simplified block diagram illustcation of a portion of the 

appacamsofHg. 1; 

Fig. 4 is a sinq>]ified flowchart illustcation of a preferred method of 

op^ation of tAie apparatus of Hg. 3; and 

Fig. 5 is a ampUfied flowdwrt illustration of a joefiBtted inq)lementation 

of stq) 210 of Fig. 4. 
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DETAEJED DESCRIPTION OF A PREFERRED EMBODIMOW 

Reference is now made to Hg. 1 which is a sm^Iified partly pict(»ial, 
partly block-diagram UJiistration of a scrambled digital data stream (SDDS) recording 
and playback system, constructed and operative in accordance with a preferred 
anbodunrat of the pr^oit invoitioiL The system of Fig. 1 comprises a Revision set 
100. The tdevision set 100 may con^nise any api«qpriate comm^dally availaUe 
^vision set As described below, ia accordance with die odi^ elemmts of the 
systask Kg. 1 desmbed bdow, die televiskm set 100 -may oonqirise eidiear an 
^piopciate analog televiskm set or an aqppropnate digital tdevisi<m set 

Hie ^stm of Rg. 1 also omposes an int^rated reoeivor-decoder 
(CRD) 110. The IRD 110 may be based on any apprcqniate oommocdally-available 
IRD op^iative to receive and decode a scrambled broadcast digital data stream and 
prc^srably additionally ccmtsdns other hardware and/or sofitware components, as 
described bdow. 

Ibe system of Fig. 1 also ccxnprises a removable security client, such 
as a smart card 120, in rranovable qioadve attachmnit wMi die IRD 110. Hie smart 
card 120 is typically suitably programmed, as is well-known m the art, to provide 
ccmtnd wends (CWs) for descxambling of a saaiid>led broadcast distal data stream by 
tl» IRD 110. Methods for programmmg and utilizing smat cards sudi as the smart 
card 120 to produce CWs are well>known in die art and are described, for exanq>le, in 
US Patents 5,282,249 to Cohen et aL and 5,481,609 to Cohen ct aL, r^sned to above, 
with suitable modifications, as are well-known in d» art aiul dssaiSbed above. 



particularly in the MPEG-2 standard, for operating on digital rate than on analog 
data. 

The system of Hg. 1 also preferably comprises a digital VCR 130, which 
may comprise any suitable digital VCR sucdhi as. for exan^le, the digital VCR 
described in the article "A Consumer Digital VCR for Digital Broadcasting" by 
Okamoto et at, referred to above. It is appreciated that any other appropriate digital 
recordmg apparatus may be used m place of the digital VCR 130, the digital VCR 130 
bdng shown in Fig. 1 by miy of example only. Foe example, and without limiting the 
genaraUty of the foregomg, an appropriate compute system may be used m place of 
die digital VCR 130, die caaspater system bang typically operative to record onto a 
computer-accessible storage mediom associated therewith. 

The IRD 110 is preferably operatively attadied to the television set 100 
and the digital VCR 130. It is appreciated that the IRD 110 may mdude digital-to- 
analQg conversion apparams (not shown), as is well known in die art, and may provide 
analog signals to die tdevision set 100, m which case die television set 100 may 
comprise an analog television set Altemativdy, die IRD 110 may provide digital 
signals to the television set 100, in ^ch case die television set 100 may comprise a 
digital television set hi any case, it is q>pxeciated diat digital signals are preferably 
usedbetweoi die IRD 110 and die digital VCR 130. 

The operation of die systcan of Rg. 1 is now briefly described. The IRD 
110 recdves a scrambled digital data stteam, also known haxan as a SDDS, fixim a 
broadcast source. The broadcast source may comprise any ^propriate broadcast 
source such as, for example, a digital caWe broadcast, a local digital television 
broadcast, or a digital satelUte television broadcast, all of whidi are well-known in die 
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att lypicaiiy, the SDDS may comprise an MPEG-2 data stream, as described in ifae 
MPEG-2 standard, refened to above. Mote generally, it is s^preciated that the present 
invoition is not limited to television broadcasts, but is s^licable to all types of digital 
broadcast, indnding data broadcasts, so diat the broadcast source may conpise any 
appropriate source broadcasting a SDDS in appropriate format 

The IRD no, in coq)eratk»i widi the smart card 120, is prefeiably 
op»:ative to desctamble the SDDS. Typically, as is well known in the art and as is 
described above, the SDDS conq»ises a pluraUty of ECMs. Each ECM is associated 
with, and is typically followed by, a scraniUed digital data segmont (SDSEG). Each 
ECM is typicalty caicoifed and conqnises tfaocdn infonnati<»i, such as a seed, which 
can be used, typically by the smart card 120, to generate a CW, the CW in turn being 
utilizable to unscramble the associated SDSEG. 

It is q>preciated diat many dififermt methods may be used to imbed the 
seed in the BCM and that anxespcmdmg methods can be used to extract the seed 
th^ftom and to g^^ate the CW. For ocan^e and widioat limiting the goieiality of 
the foregoing, the seed may be tbe input to a one-way function such as a hash function, 
and the CW may be die result of perfonning the hash function on the seed, TheCW.in 
turn, can be used, typically by the IRD 110, as a for descramhiing the scrambled 
data segment assodated with die ECM. 

Rrference is now additionally made to Hg. 2, viiikb is a smq»Iified block 
diagram iUustrating the i»x>ductiQn of a recording sraambled digital data stream faxn a 
broadcast scrambled digital data stream by the IRD 110 of Hg. 1. Tbe block diagram 
of Hg. 2 conqirises a simplified illustration of a bioadcast SDDS 140, which, as 
described above, typically conqirises a plurality of ECMs and a plurality of associated 



SDSEGs. such as: annth ECM 145; an nth SDSEG 150 associated with the nth ECM 
145; and n+lth ECM 155; and an n+lth SDSEG 160 associated with the n+lth ECM 
155. It is appreciated that the block diagram of Rg. 2 is schematic only, and that flie 
plurality of ECMs and the phiralily of assodated SDSEGs need not be physicaUy 
contiguous. One particular example of the actual layout of ECMs and the assodated 
SDSEGs m an SDDS is given in the MreG-2 standard, lefettcd to above. 

The IRD 110 of Fig. 1, in cooperation with the smart card 120, is 
preferably opsiti;ve to process the broadcas* SDDS 140, in order to produce a 
iccoiang SDDS 165. as follows. Badi ECM. such as the nth ECM 145. is processed 
as described above. ty^caUy ush« an ECM key. whidi may comprise a one-way 
function as described above, die ECM key being known to the smart card 1 20. m order 
to obtain the assodated CW such as an nth CW 170. The nth CW 170 is then 

processed usmg another key. referred to throughout the present spedfication and 
daims as a TECM key. m order to produce an nth TECM 175 which rn^ later be used, 

with flie TECM k^, to generate the nth CW 170. 

PrefCTably each TECM, such as, for example, the ndi TECM 175. is also 
signed with an appropriale distal signature, as is wdl known m the art. Preferably. 

eadi TECM key is associated wifli a unique digital signature. Preferably, upon 
subsequent playback and descrambling of die recordmg SDDS 165 the digital signature 
is diedced. and only a vaUd <H^tal signature indicating flat the recordm^ 
was produced with the apparatus of Fig. 1. typically particularly with the smart card 
120ofFig.l.willbedes<aanibledbytheapparatusofFig.l. The use of sudi a digital 
signature is considered preferable m order to discourage unauthorized dupUcation and 
subsequent playbadc of flie recording SDDS 165 using ^araliis other than the 



apparatus of Fig. 1, particularly using a diffo^ent smart card at some other location in 
place of the smart card 120. 

The TECM key may be of sunilar type to the ECM key sudi as, ftsr 
example, a one-way fonction. The TECM key, however, is preferably p^manendy 
associated wilh the system of Fig. 1; pardculaily, the TECM key does not change evoa 
when the smart card 120 is enlaced by the system operator, as described above. Thus, 
it will be predated that any SDDS associated with the TECM k^ may still be 
ctesoaniUed using the qipaiatus of Fig. 1 even aftor sudi a replaom^t of the smart 
cardl20. It is iqppredated that the lECM key mi^ be produced m a wide variety <rf 
ways, sudi as, for example, the TECM key may be associated with and, typically, 
^oied in the IRD 110;lhesinartcard 120;ao)inlHnaiion(tfdieIRD 110 and tiie smart 
card 120, sudi as parfly in the JBD 110 and partly in the smart card 120; or another 
portion of flie system of Hg. 1 (not shown). It is also appreciated that the TECM key 
may be personal to a particular user of the iqiparatus of Fig. 1, with moxe than one 
TECM key being associated with the apparatus of Fig. 1 and the appropriate TECM 
k^ bemg [voduced upon idratificaticm of a user of fbs tspj^ams of Fig. 1 by any 
me&od wdU known in the art, sudi as by piovisicm of a poscmal identification number 
(PIN). 

It is {^ppiedated diat, m a case wfa^ the TECM key is at least partially 
associated with tx stxxed in a imovable securi^ donoitsudi as the smart card 120, a 
method is preferably provided for keeping flie TECM key undianged even when the 
smart card 120 is replaced, as described above. Methods for providmg an undiangmg 
item of information are well known in priw art soambled tdevision systems usmg 
removable security elements. For exanq>le, and without linuting the generality of tiie 



foregoing, when the smart card 120 is ]:q>laced an operation be carried out 
wfaeidiy an unchanging item of information stored only in the smart card 120 is 
tenqwrarily stored in the IRD 110 and is then written to the replacement smart card 
(not shown) and erased fiom the IRD 110. Such prior art methods, for example, may 
be used to cause a TECM key to be unchan^ even whoi the smart card 120 is 
replaced. 

After the ntfiTECM 175 is generated and placed in the recording SDDS 
165, the mh SDSEG 150 may be placed in die recording SDDS 165. ft is ^predated 
that the present mvention provides an q)paralns and method foe pcodudng an 
impropriate recordmg SDDS 165 wilhout requiring descrarnblmg of any SDSEG such 
as the ndi SDSEG 150 during Ae production of the recording SDDS 165 and without 
requiring a soamblmgoperatkm to iwxiuce an SDSEG to occur m the system of ^ 1 

at ai^ time. 

It is s^predated that die method described above with respect to the nth 
ECM 145 and the nth SDSEG 150 may be repeatedly or heratively ^lied to other 
ECMs and die associated SDSEGs such as, for exanq)le, die n+ldi ECM 155, 
assodated wifli an n+lOi CW 177, to produce an n+ltii TECM 180 and die n+ldi 
SDSEG 160 m die recordmg SPDS 165. 

It is also appreciated tfiat, during playback of a recordmg SDDS ftom die 
digital vol 130 dirough die ERD 110 and assodirted smart card 120 to die leleviaon 
100, the IRD 110 and die associated sniart card 120 inay perform opcaations siini^ 

diose performed on a broadcast SDDS, but usmg die lECM key radier dian die ECM 
key. 



18 



RefiBreoce is now made to Fig. 3, v^dh is a siii^>lified block diagram 
illustration of a {KHtion of IbeIRD llOofFig. 1. The potion of tlieIRD llOshownin 
Hg. 3 is shown for providing a better understanding of the construction and operation 
of the present inv^sticm. wiOi standard conqxniaits wdl-koown in the art, sudi as 
conqxments used to receive a broadcast SDDS, not shown in Fig. 3. It is s^ypiedated 
that Uie conq>on^ts shown in F^. 3 may be provided in hardware or in software and, 
if provided in software, may be provided in comlnnaticMi in software running <m one or 
more general-purpose or spedal-puipose processors, as is well-known in the art 

The jq^^paratus of -Fig. 3 comprises a descnunbler 185 and a control word 
extract 190. The control word exttactcx- 190 may prefiaably operate as de^dbed 
above to extract CWs from ECMs in the SDDS, as described above, and to provide, (he 
CWs to the descrambler 185. The desoaoibler 185 meanwhile receives SDSEGs in 
the SDDS, as desoibed above, and applies eadi CW recdved from the desorambler 
1 85 to the associated SDSEG to produce a clear signal 

In addition, the control word extractor 190 preferably supplies the CWs 
to a scrambled digital data stream tcansfonno- 195, the scrambled digital data stream 
transformer 195 prrferably conqjrismg a IBCM g&nscaaot 200. The scrambled data 
stream tiansft»]iier 195 also receives the broadcast SDDS and operates, as described 
above wi^ r^mmce to Fl^. 1 and 2 and b^ow wi& refenmce to Figs. 4 and 5, to 
produce therefrom a recording SDDS, whidi is typically provided to a recorder. 

It may tibus be appreciated tibat descrambling operations to produce a 
clear signal, die desciambling opaaAcm bdng typically sunilar to descxambling 
opaati<»is wdl>known in die art, may occm in tibe iqpparatus of Fig. 3 in parallel with 
the production of a recordmg SDDS. It is sqipreciated that, m a pieferred 
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iiiq)laneiitatioii of the ^paratos of Fig- 3, adequate buffering may be provided in the 
scrambled digital data stieam transfonner 195 or elsewhere in order to permit 
continuous production of the iccoidmg SDDS fiom the broadcast SDDS. Such 
mdfaods of bufSning aie well^aiown in the art 

It is fijrther predated that the s^aratus of Fig. 3 may be operative to 
descramble a recording SDDS and provide a dear signal tiiraeftom by providing die 
recording SDDS as mput to the apparatus of Fig. 3 in place of the broadcast SDDS, the 
control word extractor being <qjerative in such a mode to provide control words, as 
described above, usmg a TECM key rather than an ECM key. 

tbsiaeacc is now made to Fig. 4 which is a sunplified flowchart 
illustration of a prefmed mediod of operation of die a^taiatus of Fig. 3. Hie metiiod 
of Fig. 4 pKckaSAy comptises die fbllowmg steps: 

An input SDDS is lecdved (step 205). Each ECM in flie mput SDDS is 
replaced vwtii a TECM, die ECM comprising CW generating mfotmation and die 
TECM also oanprismg control word geoMating information for gensaating die same 
CW as die ECM (stqp 210). An ou^t SDDS is dius produced. The ou^ut SDDS is 

dien output (step 215) 

Reference is now made to Rg. 5, which is a sin^lified flowchart 
illustration of a preferred in^lementation of stq> 210 of Rg. 4. The mediod of Fig. 5 
preferably comprises die following steps, whidi are preferably performed it^vely 

for easb ECM in die mput SDDS: 

One ECM and an SDSEG associated widi die ECM are mput (step 220). 

The CW assodated widi die ECM is generated fiom die ECM using an ECM key (step 
225). A TECM is generated usjoag a TECM key, die TECM comprising information 



for genCTating the same CW as the ECM (step 230). The TECM is output (step 235), 
and the SDSEG assodated witti the ECM, and thus also assodated with the TECM, is 
also output (stq> 240). 

It is sqpineciated Uiat various features of the invention whidi ace, for 
clarity, described in the ccmtexts of sq>acale embodim^ may also be provided in 
condnnaticm in a single embodiment Omversely, various features of the invraition 
whidi are, for brevity, desoibed in the context of a angle ^nbodimoat may also be 
provided separately or in any suitable subconibmation. It is particukdy ^predated 
fliat die fnnctioiisdescribed h^i^ as bdng performed a rranovable 'Security device 
or smart card m^ be jfcdkmsued by ano&a: iqpiffopciatB part of the syston described, 
suchasanlRD. 

It will be qipreciatfid by persons drilled in the art that the preset 
invraticm is not limited by what has bcea particularly shown and desoibed 
h«dnabove. Ratfara: the scope of the invoition is ddSned <xiy the by claims wiiidi 
follow: 



What is claimed is: 



CLAIMS 



1, A method for producing an output soanobled digital data stream from 
an mput scrambled digital data stream, the input scrmnbled digital data stream 
conqdsing a phiraUty of control messages (ECftfc), eadd ECM comprismg coded 
information for generating a control word (CW) associated wifli the ECM and being 
encoded using an ECM key, die iiqyut sctanfl>led digital data stream also con^ 
plurality of segments of scrambled digital data, eadi segment of scrambled digital data 
bemg associated with one of die plurality of ECMs and bdng scranibled usmg the CW 
associated with tibe ECM, the method compming: 

replacing each of the plurality of ECMs with a corresponding 
transformed ECM (TECM), eadi corresponding TECM comprismg coded information 
fiMT genoMting the CW asspdated with the corresponding ECM and being encoded 
using a TECM key, thus ptoducmg the ou^ scrambled digital data stream, 

wherein the ECM key is replaced wilh anew ECM key at an ECM key 
change time, and the TECM key is not replaced at Ae ECM key change tune. 

2. A ni^hod according to daun 1 and wfa^ein tfie st^ of replacing 
comprises performing the following Sbeps itarativdly for eadi one of the plurality of 
ECMs: 

lecdving die one ECM and the segment of scrambled digital data 
associated therewith; 
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g«Di«ratmg the associated CW fiocmi tibe one ECM using the ECM k^; 
gmerating a tcansfom^ ECM (TECM) comprising coded infonnation 
for graiffirating the assodated CW and bong racoded using a TECM key; 
outpiitting the lEC^; and 

outputting the segmoit of scrambled distal data assodated witfi die 

ECM. 

3. A method for recording, on a recording medium, a broadcast scrambled 

digital data stream to produce a scrambled digital rec(»ding, the broadcast scramibled 
digital data stream conq}rising a ploraliQr of control messages (ECMs), each BCtA 
fxmpdsmg coded information fox geneiatnig a cmitrol wcml (CW) associated with the 
ECM and being encoded using an ECM key, the broadcast scrambled digital data 
stream also comprising a plurality of segments of scrambled digital data, each segmrat 
of soambled digital data bdng assodated with (me of die plurality of EGMls and being 
scrambled ii»ng dxe CW assodated wi& the ECM, tfie method comprising: 
receiving the l»oadcast soambled digital data stream; and 
reooniing an die recordiiig medium a scrand>Ied digital data stream 
conpising a plurality of transformed ECMs (lECMs) and the plurality of segments of 
digital data, ^x^berein each of the phirality of ECMs is rqdaced with a cone^nding 
TECM, eadi corresponding TECM comprising coded information for generating the 
CW associated with die oMiesponding ECM and being encoded using a TECM key. 



4. A method aax>idmg to claim 3 and whndn the recording step 
conq>rises petfonning the following stqps itraatively for each one of the plurality of 
ECMs in the broadcast scrambled digital data stream: 

geneiating the assodated CW ftxm the one BCM using the ECM key; 

gen^ating a TECM. conqdsing coded infonnation for grafting the 
associated CW and bdng racoded udng a TECM key; 

recording the TECM on the recording medium; and 

lecoiding the segment of scrambled digital data associated widi the one 
BCM on the recording medium. 

5, A mettiod according to ddier dLsdm 3 or daim 4 and wtaxdn the 
leccnding medium co]iq>rises a digital tape. 

6. A method accoiduig to dther daun 3 <x daim 4 and wherein the 
reconling medium comprises a conqmtn-accessible stwage medium associated with a 
computer. 

7, A method according to any of claims 3-6 and wherdn the broadcast 
soambled digital data stream comprises a tdeviaum scrandded digital data stream. 

g, A method according to any of the piecedingdainis and wh^xaneadi of 

&e plurality of ECMs is racoded using ahashmg method. 



OA 



9. Apparatus fix recording, on a rec(nidmg mBdium, a broadcast scrambled 
digital data stream to produce a recorded scrambled digital data stream, the broadcast 
S(»aiid>l6d digicd data stream compnsaag a ptoralii^ of soambUng control messs^ 
(ECMs), eadi ECM conqnising coded infonnaticm for geaorating a control word (CW) 
associated mdi tbe ECM and being encoded using an ECM key, and a plurality of 
segmraits of scrambled digital data, eadh segmoit of sarambled digital data bdng 
assodated with one of tbe phuality of ECMs and bdng scrambled using die CW 
associated wiOi the ECM, the epparatas conqirising: 

receiving qjparatus for reodving the broadcast scrambled digital data 

stcean^and 

recording apparatus for recording on the recording medium a scrambled 
digital data stream ccmipciang a pluiaUty of tFansfotmed BCMs (TECMs) and the 
plurality of segments of digital data, wherein eadb of die plurality of ECMs is replaced 
with a coire^nding TECM, eadi anrespcmding TECM con^rising coded 
information for gmetating the CW associated widi the corresponding ECM and being 
encoded using a TECM key. 

10. Aj^raratus for producing an output scnunUed distal data stream firom an 
input scrambled digital data stream, die iiq>ut scrambled digital data stream con^tising 
a plurality of scaaniUing ccmtrol message OBCMs), each ECM conqnising coded 
information for gjsaexaliDg a control word (CW) associated wilfa the ECM and being 
encoded using an ECM key, and a plurality of segments of soambled digital data, each 
segn^t of scrand>led digital data being as«x:iated widi one of die plurality of ECMs 



and being scrambled using the CW assodated wilh the ECM, the ^aratus 
compnsing: 

ECM iqpiacenK»it apparatns for lepladng eat* of the plurality of ECMs 
with a corresponding transformed ECM (lECM), each craiesponding TECM 
comprising coded information for genwaling the CW assodaled widi the 
corresponding ECM and bdng encoded using a TECM k^, 

wherein the ECM key is re^aced with a new ECM key at an ECM key 
change time, and the TECM key is not replaced at die ECM k^ change time. 

11. y^E»parat»»s aocoidmg to claim 9 and wherean the recording apparatus 

comprises: 

a CW extractor for generating the assodated C:W from each of the 
plurality of ECMs using the ECM k^; 

a TECM generator for recdving the associated CW from flie CW 
extractor and for generating a TECM comprising coded information for generating the 
assodated CW and bdng encoded uang a TECM key; and 

medium recoidmg apparatus for recdving the TECM from die TECM 
gen«ator and the segment of scrambled.digital data from the receiving apparatus and 
for recording die TECM and the s<^mrait of scrambled digital data associated with the 
one of the phirality of ECMs on die recQnlmg medium. 

12. Apparatus according to daun 10 and wheidn die ECM replacement 

iq^parattts conpises: 



a CW extractor for generatiiig the associated CW £com eadi of the 
plurality of ECMs using the ECM key; and 

a TECM gooerator for receiving the assodated CW fixmi die CW 
extractor and for graieratiag a TECM con^rising coded informaticni for generating the 
assodated CW and encoded using a TECM icey. 

13. Apparatus acccwding to dthor daim 1 1 or claim 12 and also compcisiAg 
axemovable security device, 

- wheidn&eTHiiovd>le security device c(mqaisestbeCW extras 

14. Apparatus acoraxling to daun 13 and whotdn die iranovable security 
device ako ccmqicises die TECM g/eaexa^or, 

15. Aj^aratus acconiiag to dtiier daim 13 or daim 14 and vidmein the 
TranovaUe seamty device conqiii^ a anart card. 

16. Apparatus fsx transfomung a saand)Iing control message (ECM) 
conq>iising coded informatiGai for goo^adng a contrcd word (CW) assodated with the 
ECM and being oiooded using an ECM key into a transformed scrambling control 
iiKssage (TECM), ibt appaaaas compiang: 

ECM input s^aratus for recdving die ECM; 

a extractcn* fm gmocating the assodated CW from (he ECM using 

die ECM key; 



a TECM generator for goiecadng a tcansfonned ECM (TECM) 
coix^iismg coded infcmnation for generating the associated €^ and bdng encoded 
using a TECM key; and 

ECM output s^paratns for ou^tdng the TECM, 

whecdn tbe ECM key is r^laced with a new ECM key at an ECM key 
change time, and the TECM key is not replaced at the ECM change tune. 

X7. Apparatus for producing an output scxaiid>led digital data stream ficom 

an input scrambled digital data stream, the input scrambled digital data stream 
comprising a plurality of control messages (ECMs), each ECM conqniMng coded 
mfoonation for generating a control word (CW) associated with the ECM and being 
encoded using an ECM key, the input scrambled digital data stxeam also compcising a 
plurality of segments of soambted digital data, eadi segment of scrainbled digital data 
being assodated with one of the plurality of ECMs and being scrambled using the CW 
associated with the ECM, &e apparatus conqnising: 

scxambled digital data stream input ^yparams for receiving an ECM and 
a segment of scrambled digital data associated tibraewith; 

ECM t^dacanent apparatus for iqpladng the ECM with a transformed 

ECM CnSGM): and 

scrambled digital data stream output ^paratus for outputtmg the ouQ>ut 
scramihled digital data stxeam con^tising the TECM and the segmrat of scrambled 
digital data, 

wherein the ECM key is replaced wifli a new ECM key at an ECM key 
change tune, and the TECM key fe not replaced at the ECM key change tane. 
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18. 

TECM. 



Apparatus accarding to claim 17 and also con^Misuig: 

ECM intoiace qppaiatas fen: ou^utting &e ECM and receiving the 



19. A|»paFatus acoofding to daim 18 and wlusein tibe ECM inteiface is 
adiqpted to lecdve a rranovid>le security dgmeoL 

20. Appaiatus aoooiding to claim 19 and udmn the femovable secuxity 
elemoit conpises a smart card. 

21. A mediod for ttansfonning a sctamihiing control message (ECM) 
conpising coded information for gaic»:ating a omtnd word (CW) assodated widi tlie 
ECM and bdng encoded using an ECM key into a transformed scrambling control 
message (TECM), die method onnpcisiQg: 

receiving tte ECM; 

^nnating die associated CW ficom die ECM using die ECM key; 
g^ierating a transformed ECM (TECM) comprismg coded information 
for generating die associated CW aiKi being oocoded using a IBCM key; and 
outputting the TECM, 

whram die ECM key is iqilaced widi a new ECM key at an ECM 
diange time, and die TECM key is not replaced at die ECM diange time. 



22. AinethodforpiX)duci]igan(mtptttsaraiiibl^ firoman 

input scrambled digital data stieam. Ihe iiqrat scrambled digital data stream con^rising 
a pluraUty of cootiol messages (ECMs), eadi ECM compiising coded information for 
genraating a control word (CW) assodated with tbe ECM and bdng racoded using an 
ECM key, the input scrambled digital data stream also conq)rising a plurality of 
segments of scrambled digital data, each segmrait of scrambled digital data being 
assodated with one of the ptaralily of ECMs and bdng scrambled using the CW 
assodated with the EC3^, the method coix^rising: 

leodving an ECM and a s^ment of soarnbled digital data assodated 

r^acing the ECM with a ttansfooned ECM (TECM); and 

ODtpotting the output scnonibled digital data stream comprismg the 

TECM and the segmmt of scrambled digital data, 

whonan flie ECM key is replaced with a new ECM key at an ECM key 

diangp time, and tite TECM key is not r^laced at the ECM key diange time. 

23. A method according to dahn 22 and also comprising: outputtmg the 
ECM and lecdvmg die TECM. 

24. A method according to daim 23 and wfa^odn the step of ou^utting the 
ECM and receiving the TECM com^ises: 

outputting the ECM to a rmovable security elemraot and receivmg the 
TECM from die removable security el^ent 



25. A mediod according to daim 24 and wfaerem liie removable security 
etement conqnises a smart card. 

26. Apparatus according to any of claims 9-20 and substantially as 
d^cribed hereinabove. 

27. Apparatus according to any of claims 9 - 20 and substantially as shown 
in Ifae drawings. 

28. A m^faod aoooxdmg to any of dahns l-8and21-2Sand substantially 
as described faradnabove. 

28. Am^faodacoordingto ai^ of claims 1 •8and21 -25 and substantially 

as shown in the drawings. 
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